Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c43cd13e-7678-3ec1-b96f-58009cdcb045.roa
File:                     c43cd13e-7678-3ec1-b96f-58009cdcb045.roa (raw, json)
Hash identifier:          FnfzW6LQhnjwWMUt09rkls0yVCABKS5mGiIoL8ku8eA=
Subject key identifier:   66:D8:2D:A9:B4:88:80:FC:85:DA:43:06:62:A7:46:57:D4:D4:7C:53
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C080221A413A9466A9E4E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c43cd13e-7678-3ec1-b96f-58009cdcb045.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.110.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:02:21:a4:13:a9:46:6a:9e:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=58377e6e-2cae-4183-b3c7-00a43529460f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:24:e4:03:8c:e7:d8:df:28:b7:64:63:df:
                    ba:7c:cf:84:72:ba:b5:02:7a:c6:cc:b8:09:17:a7:
                    30:71:a3:a4:4c:f0:63:78:f2:de:59:af:ab:ba:b1:
                    88:ed:6e:f7:d2:3b:f2:74:3f:4c:e6:e9:5f:2b:90:
                    48:af:15:fe:cc:f1:bb:d0:30:cc:e3:0e:1c:f3:d7:
                    f2:ff:61:6e:d4:99:ba:78:aa:2e:90:05:fd:c8:ab:
                    fe:2b:1a:67:98:9e:98:44:31:6c:e9:71:a5:48:91:
                    a9:dc:89:52:cc:2f:89:4c:2a:a8:c3:16:25:ca:46:
                    cc:b7:7d:65:41:f5:70:4f:97:3a:3f:66:a4:f9:d1:
                    0d:55:96:52:22:0a:ef:01:78:01:be:a0:f9:2a:a8:
                    af:db:58:ba:27:94:41:c9:15:ae:1d:09:a5:fc:30:
                    65:4d:fc:7d:09:c9:e1:60:be:3d:ef:74:97:bd:a1:
                    5d:6c:21:ac:02:32:80:08:54:b6:74:ca:a8:2a:c9:
                    01:78:af:66:25:84:c6:4a:98:8f:b3:2f:55:fa:d8:
                    66:1d:5d:b6:20:0e:2e:3e:18:3a:35:d7:e5:6e:c2:
                    f2:07:7b:81:64:91:bf:df:15:91:7a:b7:cd:cf:8d:
                    a4:01:88:dc:ea:40:54:23:69:a3:ab:9d:a3:76:2a:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D8:2D:A9:B4:88:80:FC:85:DA:43:06:62:A7:46:57:D4:D4:7C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c43cd13e-7678-3ec1-b96f-58009cdcb045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.110.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:5c:30:d6:2d:c6:4f:32:4d:19:b2:d5:59:63:23:5c:0c:
         e1:ef:c8:fc:e6:4d:cb:1a:87:14:91:38:f2:8b:9c:d7:38:d3:
         c6:62:11:31:78:4e:38:d7:02:be:cd:d8:7c:20:47:8e:cc:fd:
         b8:2e:b6:1d:38:9a:2b:84:bc:24:ad:a7:a6:b5:73:bb:07:74:
         f5:71:39:8e:8f:6f:ed:a3:24:78:ec:37:e1:81:96:bd:ca:b6:
         e6:50:c0:1c:8b:c1:99:d5:be:00:ff:12:3a:6b:e6:23:86:d0:
         15:d7:e7:79:4a:6e:f6:38:eb:a3:a0:28:1b:5b:08:09:9a:2e:
         5f:0e:51:02:7f:8c:ae:22:97:18:ae:f7:31:c5:7b:1a:65:31:
         16:e0:3d:51:9e:26:b2:02:59:2a:f2:51:56:08:1b:20:b1:94:
         14:9e:92:a7:b8:cf:39:61:92:45:aa:10:43:9b:aa:9c:fc:af:
         b6:d2:5a:96:18:2e:fc:35:56:44:c7:cc:86:11:e2:ea:e4:ed:
         3e:e7:44:06:61:e1:82:0c:a4:d9:66:4f:22:dd:e1:ba:e2:6e:
         d0:82:8a:b1:86:d1:17:30:8e:b6:7f:1c:85:3e:12:21:3f:ac:
         70:ec:5e:e0:53:a1:87:12:4d:70:6d:42:d6:f3:05:ca:2c:41:
         e2:cb:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:42:11 2025 by rpki-client